This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: BYKXhNoYa/b8b1DC9n/sPl0OiK1f1HiJHCuD3vHZDx8= Subject key identifier: D1:C1:80:2A:B4:6A:01:79:17:84:A9:8A:B2:F6:BE:48:D9:35:2E:68 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 0F Signing time: Tue 02 Dec 2025 14:41:56 +0000 Manifest this update: Tue 02 Dec 2025 14:41:56 +0000 Manifest next update: Tue 09 Dec 2025 14:41:56 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: FF7dah7f8Z8qfmL/QgRx1O6CG3A8/ZD35pN20GW6aPI=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: ZnOlNoLSibfq3/qIsrDbM5RZVyIuk7cWs+48nm4czSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Dec 2 14:41:56 2025 GMT Not After : Dec 9 14:41:56 2025 GMT Subject: CN=692efab4-2406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:d9:13:a3:9d:ca:8d:ba:e6:d7:dd:d6:a9: 58:82:27:24:62:18:d3:5b:89:66:23:ad:bf:84:18: ad:c5:ec:e6:1b:17:cd:3e:44:d5:7f:d9:c2:72:25: bf:65:3d:e0:db:b0:9a:b8:83:57:67:cf:e0:3a:3f: 77:f9:e9:36:0d:7e:f5:11:cc:42:b1:b5:da:b9:4f: 24:8a:64:f4:fa:cf:c0:e6:3d:37:60:be:3d:60:d9: 55:4b:2c:57:ac:23:a3:23:47:03:a2:d3:0e:d2:b8: 2f:b8:cc:97:f2:c9:c1:ff:6f:d8:39:d7:24:08:4b: 4c:65:e8:34:f4:e3:73:86:ce:01:23:8d:4a:68:13: 2c:13:8a:59:63:a0:56:21:7a:5f:71:d4:97:8a:96: fa:4c:26:c1:ea:45:0f:5c:31:23:c7:72:98:95:75: f0:73:b9:f7:7c:40:71:2f:f8:3e:f1:81:42:82:a9: 4b:b0:5d:d8:53:3f:3d:14:fa:7a:68:7b:57:b5:1d: fd:86:13:0a:82:ff:f1:51:76:5a:ae:d3:c9:95:de: 0c:b9:89:69:98:08:c4:10:fd:ff:7d:ed:54:f4:05: 18:21:30:ac:f4:50:72:33:e6:72:da:bf:88:70:e8: 67:6d:88:ef:2f:cd:44:bc:7d:92:66:51:2e:a4:ea: 3a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:80:2A:B4:6A:01:79:17:84:A9:8A:B2:F6:BE:48:D9:35:2E:68 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c8:ca:2f:65:01:58:3b:2e:8b:9b:93:21:20:b0:a9:32:05: ae:ba:41:63:bc:ef:49:20:8e:02:72:38:04:05:3a:c5:f3:a4: 66:89:f2:9c:72:cf:4e:d1:cc:1d:b1:a2:cf:a1:98:90:5d:c4: 60:e6:8b:0a:24:2a:f0:89:e6:d4:4a:c9:c1:b5:22:a0:5c:f1: 18:b0:81:74:19:dc:d4:66:4e:ce:91:87:03:d6:81:2e:30:f5: 40:ce:2b:85:7b:ce:1f:fd:5f:52:74:84:ce:d7:85:f3:c5:c6: 3f:36:43:90:f0:d5:e8:f9:3e:9d:6d:d2:ec:72:33:1a:b5:1b: 0e:02:43:1f:f2:23:b0:bf:36:1b:d7:65:2b:0a:0e:0d:36:f0: f5:bc:7f:5e:29:da:fb:46:ea:a7:b2:8b:8e:7c:f1:b6:3b:45: 12:b4:bc:39:c0:33:57:64:48:e3:e8:a5:7e:90:a3:60:98:c1: e5:05:3a:c6:8b:ee:69:e4:b5:5f:b3:b8:e0:4d:82:ae:c0:3d: 6e:7d:72:4b:98:de:ac:dd:8c:05:f0:60:60:fb:fd:c7:cf:ed: 36:2f:99:68:af:dd:f8:21:3a:55:28:36:58:d8:c1:1f:7c:80: 43:69:13:62:6c:32:6c:1f:7d:91:1c:22:c6:b0:1f:b5:ab:5f: 2b:8b:60:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNTEyMDIxNDQxNTZaFw0yNTEyMDkxNDQxNTZaMBgxFjAUBgNV BAMTDTY5MmVmYWI0LTI0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcHdkTo53Kjbrm193WqViCJyRiGNNbiWYjrb+EGK3F7OYbF80+RNV/2cJyJb9l PeDbsJq4g1dnz+A6P3f56TYNfvURzEKxtdq5TySKZPT6z8DmPTdgvj1g2VVLLFes I6MjRwOi0w7SuC+4zJfyycH/b9g51yQIS0xl6DT043OGzgEjjUpoEywTilljoFYh el9x1JeKlvpMJsHqRQ9cMSPHcpiVdfBzufd8QHEv+D7xgUKCqUuwXdhTPz0U+npo e1e1Hf2GEwqC//FRdlqu08mV3gy5iWmYCMQQ/f997VT0BRghMKz0UHIz5nLav4hw 6GdtiO8vzUS8fZJmUS6k6jqZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0cGAKrRq AXkXhKmKsva+SNk1LmgwHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMHIyi9lAVg7LoubkyEgsKkyBa66QWO870kgjgJyOAQFOsXzpGaJ8pxy z07RzB2xos+hmJBdxGDmiwokKvCJ5tRKycG1IqBc8RiwgXQZ3NRmTs6RhwPWgS4w 9UDOK4V7zh/9X1J0hM7XhfPFxj82Q5Dw1ej5Pp1t0uxyMxq1Gw4CQx/yI7C/NhvX ZSsKDg028PW8f14p2vtG6qeyi4588bY7RRK0vDnAM1dkSOPopX6Qo2CYweUFOsaL 7mnktV+zuOBNgq7APW59ckuY3qzdjAXwYGD7/cfP7TYvmWiv3fghOlUoNljYwR98 gENpE2JsMmwffZEcIsawH7WrXyuLYG0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:18 2025 by rpki-client